What I'd like to see is enforced reproducible builds from multiple sources with publicly published and verifiable results that don't fall out of date.